podimpersonation

package

v0.0.0-...-43fc03f Latest Latest Go to latest Published: Apr 24, 2024 License: Apache-2.0 Imports: 22 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/rancher/steve

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type PodImpersonation
- func New(key string, cg proxy.ClientGetter, roleTimeout time.Duration, ...) *PodImpersonation
type PodOptions

Constants ¶

View Source

const (
	TokenLabel = "pod-impersonation.cattle.io/token"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type PodImpersonation ¶

type PodImpersonation struct {
	// contains filtered or unexported fields
}

func New ¶

func New(key string, cg proxy.ClientGetter, roleTimeout time.Duration, imageName func() string) *PodImpersonation

func (*PodImpersonation) CreatePod ¶

func (s *PodImpersonation) CreatePod(ctx context.Context, user user.Info, pod *v1.Pod, podOptions *PodOptions) (*v1.Pod, error)

CreatePod will create a pod with a service account that impersonates as user. Corresponding ClusterRoles, ClusterRoleBindings, and ServiceAccounts will be create. IMPORTANT NOTES:

To ensure this is used securely the namespace assigned to the pod must be a dedicated namespace used only for the purpose of running impersonated pods. This is to ensure proper protection for the service accounts created.
The pod must KUBECONFIG env var set to where you expect the kubeconfig to reside

func (*PodImpersonation) DeleteRole ¶

func (s *PodImpersonation) DeleteRole(ctx context.Context, pod v1.Pod) error

func (*PodImpersonation) PurgeOldRoles ¶

func (s *PodImpersonation) PurgeOldRoles(gvk schema.GroupVersionKind, key string, obj runtime.Object) error

type PodOptions ¶

type PodOptions struct {
	ConfigMapsToCreate []*v1.ConfigMap
	SecretsToCreate    []*v1.Secret
	Wait               bool
	ImageOverride      string
}

Source Files ¶

View all Source files

podimpersonation.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL